CVE-2021-47161

spi: spi-fsl-dspi: Fix a resource leak in an error handling path

MEDIUM
5.5
CVSS Score
Published: March 25, 2024 at 09:16 AM UTC
Updated: June 17, 2026 at 04:16 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspi_request_dma()' should be undone by a 'dspi_release_dma()' call in the error handling path of the probe function, as already done in the remove function

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.10 ≤ v < 4.14.2414.10 ≤ v < 4.19.1994.10 ≤ v < 5.10.424.10 ≤ v < 5.12.94.10 ≤ v < 5.134.10 ≤ v < 5.4.1244.15 ≤ v < 4.19.1994.20 ≤ v < 5.4.1245.11 ≤ v < 5.12.95.5 ≤ v < 5.10.425.13 rc15.13 rc25.13 rc390ba37033cb94207e97c4ced9be575770438213b
Vendor states this is fixed in 00450ed03a17143e2433b461a656ef9cd17c2f1d (fixed)
Vendor states this is fixed in 10a089bae827ec30ad9b6cb7048020a62fae0cfa (fixed)
Vendor states this is fixed in 12391be4724acc9269e1845ccbd881df37de4b56 (fixed)
Vendor states this is fixed in 15d1cc4b4b585f9a2ce72c52cca004d5d735bdf1 (fixed)
Vendor states this is fixed in 680ec0549a055eb464dce6ffb4bfb736ef87236e (fixed)
Vendor states this is fixed in fe6921e3b8451a537e01c031b8212366bb386e3e (fixed)
Vendor states this is fixed in 4.10 (unaffected)
Vendor states this is fixed in 4.14.241 (unaffected)
Vendor states this is fixed in 4.19.199 (unaffected)
Vendor states this is fixed in 5.10.42 (unaffected)
Vendor states this is fixed in 5.12.9 (unaffected)
Vendor states this is fixed in 5.13 (unaffected)
Vendor states this is fixed in 5.4.124 (unaffected)

References (6)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/00450ed03a17143e2433b461a656ef9cd17c2f1d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/10a089bae827ec30ad9b6cb7048020a62fae0cfa
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/12391be4724acc9269e1845ccbd881df37de4b56
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/15d1cc4b4b585f9a2ce72c52cca004d5d735bdf1
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/680ec0549a055eb464dce6ffb4bfb736ef87236e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fe6921e3b8451a537e01c031b8212366bb386e3e

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-209

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card